CVE-2023-25450

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

CVE-2023-25450

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

CVE-2023-25450 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

CVE-2023-25450

CVE-2023-25450 refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress GiveWP plugin and Fundraising Platform, affecting versions

CVE-2023-25450 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin = 2.25.1 versions...

PT-2023-20070 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin versions = 2.25.1 Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actio...

WordPress Plugin iveWP GiveWP–Donation Plugin and Fundraising Platform 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin iveWP...

WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection

Software GiveWP Type Plugin Vulnerable versions = 2.25.3 Fixed in 2.26.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-32513 Patch priority High CVSS severity High 7.5 Developer Liquid Web / StellarWP PSID 8e6fd83cfd05 Credits Rafie Muhammad Patchstack Required...

WordPress GiveWP Plugin < 2.25.2 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:givewp:givewp"; ifdescription...

CVE-2023-23668

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...

CVE-2023-23668

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...

CVE-2023-23668

The CVE-2023-23668 entry concerns the WordPress GiveWP plugin, versions

Wordpress plugin GiveWP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-19112 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP plugin versions = 2.25.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with contributor or higher permissions. Recommendations: For...

GiveWP Plugin for WordPress < 2.24.1 SQL Injection

The WordPress GiveWP Plugin installed on the remote host is affected by a sql injection vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

WordPress GiveWP Plugin <= 2.25.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software GiveWP Type Plugin Vulnerable versions = 2.25.2 Fixed in 2.25.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 6.3 Developer Liquid Web / StellarWP PSID b47d199cd32e Credits Rafie Muhammad Patchstack...

GiveWP < 2.25.3 - Cross-Site Request Forgery

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection

Software GiveWP Type Plugin Vulnerable versions = 2.25.1 Fixed in 2.25.2 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-22719 Patch priority Low CVSS severity Low 4.7 Developer Liquid Web / StellarWP PSID 7ead0bb10ca7 Credits Rafshanzani Suhada Required privilege...